RP_DCP_Code_Exec

Real Player 'DCP://' URI 원격 임의 코드 실행 취약점 동영상 데모: https://youtu.be/AMODp3iTnqY 'DCP://' URI 스킴은 Real Player가 플레이어 브라우저 탭에 표시할 URL을 가져오는 데 사용하는 내부 프로토콜입니다. 이는 'Data Cache Protocol'을 의미합니다. '%appdata%\real\realplayer'에서 파일을 검색합니다. 이 파일들은 다음 코드를 포함하는 단순한 '.ini' 파일입니다: ---sampledcp.ini--- urls...

CVE-2022-32271

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary loca...

CVE-2022-32271: Improper Neutralization of Input During Web Page Generation

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary loca...